[1] Jung J Y, Sit E, Balakrishnan H, et al. DNS performance and the effectiveness of caching[J]. IEEE/ACM Transactions on Networking, 2002, 10(5):589-603.
[2] Shan Guihua, Wang Yang, Xie Maojin, et al. Visual detection of anomalies in DNS query log data[C]//IEEE Pacific Visualization Symposium. New York:IEEE Press, 2014:258-261.
[3] 林成虎, 李晓东, 金键, 等. 基于W-Kmeans算法的DNS流量异常检测[J]. 计算机工程与设计, 2013, 34(6):2104-2108. Lin Chenghu, Li Xiaodong, Jin Jian, et al. DNS traffic anomaly detection based on W-Kmeans algorithm[J]. Computer Engineering and Design, 2013, 34(6):2104-2108.
[4] 王靖云, 史建焘, 张兆心, 等. 基于相对密度的DNS请求数据流源IP异常检测算法[J]. 高技术通讯, 2016, 26(10-11):849-856. Wang Jingyun, Shi Jiantao, Zhang Zhaoxin, et al. An algorithm for detection of source IP anomalies in DNS query based on relative density[J]. High Technology Letters, 2016, 26(10-11):849-856.
[5] 马云龙, 姜彩萍, 张千里, 等. 基于IPFIX的DNS异常行为检测方法[J]. 通信学报, 2014, 35(增刊1):5-9. Ma Yunlong, Jiang Caiping, Zhang Qianli, et al. DNS abnormal behavior detection based on IPFIX[J]. Journal on Communications, 2014, 35(Sup1):5-9.
[6] 周昌令, 栾兴龙, 肖建国. 基于深度学习的域名查询行为向量空间嵌入[J]. 通信学报, 2016, 37(3):165-174. Zhou Changling, Luan Xinglong, Xiao Jianguo. Vector space embedding of DNS query behaviors by deep learning[J]. Journal on Communications, 2016, 37(3):165-174.
[7] Schölkopf B, Smola A J, Müller K R. Kernel principal component analysis[C]//7th International Conference on Artificial Neural Networks (ICANN). Berlin:Springer, 1997:583-588.
[8] Davies D L, Bouldin D W. A cluster separation measure[J]. IEEE Transactions on Pattern Analysis and Machine Intelligence, 1979, 1(2):224-227.
[9] Jenssen R. Kernel entropy component analysis[J]. IEEE Transactions on Pattern Analysis and Machine Intelligence, 2010, 32(5):847-860. |